Trust & Privacy
This page is maintained by NoorStudio to answer common security and privacy questions. It describes current practices, not independent verification or legal certification.
Access & Authentication
NoorStudio uses email-based and social authentication through a managed identity provider. Accounts are required to generate content. We do not support password-only access; sign-in links and OAuth providers are used instead.
You are responsible for keeping your sign-in credentials and device access secure.
Platform & Hosting
NoorStudio is built and hosted on the Lovable platform, which deploys to a global edge network. The application runs in a serverless environment, and the database is hosted on a managed PostgreSQL service with encryption at rest.
Platform-level security (infrastructure patches, network isolation, and edge protection) is handled by the hosting provider. Application-level security (access controls, data handling, and content policies) is handled by NoorStudio.
Data Collection & Use
We collect only the data needed to run the service:
- Account information (email address) for authentication and billing status.
- Content generation inputs (topics, style preferences, language choices) to produce scripts, hooks, titles, and hashtags.
- Generated outputs are stored so you can revisit your history.
We do not sell your data. We do not use your inputs or outputs to train public AI models. Content generation is handled through a managed AI gateway; prompts and outputs are processed according to the gateway provider's terms.
Subprocessors & Integrations
NoorStudio relies on a small set of managed services:
- Managed identity and database provider (authentication and data storage).
- Managed AI gateway (content generation).
- Edge hosting platform (application delivery).
Cookies & Analytics
NoorStudio does not use third-party analytics or advertising cookies. Essential cookies and local storage tokens are used strictly for authentication and session management.
Retention & Deletion
Generated content and account data are retained while your account is active. If you request account deletion, your data is removed immediately. We do not keep backups of deleted user content beyond standard infrastructure snapshots, which are purged on the provider's schedule.
Privacy Requests & Account Deletion
To request a copy of your data, correct your information, or delete your account, email us at hanzalatauheed007@gmail.com. We aim to respond within a few business days.
Security Contact & Vulnerability Reporting
If you discover a security issue, please report it responsibly to hanzalatauheed007@gmail.com. Do not disclose vulnerabilities publicly before we have had a chance to address them.
This page reflects current practices and may be updated as the service evolves. If you have questions not covered here, reach out at hanzalatauheed007@gmail.com.